Security > Google reCAPTCHA Admin Panel
Last update: November 29, 2023
- Topics:
- Configuration
- Security
CREATED FOR:
- Beginner
- Intermediate
- Admin
- Developer
- User
Before Google reCAPTCHA can be configured, you must ensure that your
PHP.ini
file includes the following setting: allow_url_fopen = 1
. This may require developer assistance. See Required PHP Settings in the Installation Guide.To access the store configuration settings, choose Stores > Settings > Configuration from the Admin sidebar.
For more information about changing these settings, see Google reCAPTCHA in the Admin Systems Guide.
reCAPTCHA v2 (“I am not a robot”)
Field | Scope | Description |
---|---|---|
Google API Website Key | Global | The website key that is created when you register your Google reCAPTCHA account. |
Google API Secret Key | Global | The secret key that is associated with your Google reCAPTCHA account. |
Size | Global | The size of the Google reCAPTCHA box that appears during login. Options: Normal (default) / Compact |
Theme | Global | Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme |
Language Code | Global | A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. |
reCAPTCHA v2 Invisible
Field | Scope | Description |
---|---|---|
Google API Website Key | Global | The website key that is created when you register your Google reCAPTCHA account. |
Google API Secret Key | Global | The secret key that is associated with your Google reCAPTCHA account. |
Invisible Badge Position | Global | The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left |
Theme | Global | Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme |
Language Code | Global | A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. |
reCAPTCHA v3 Invisible
Field | Scope | Description |
---|---|---|
Google API Website Key | Global | The website key that is created when you register your Google reCAPTCHA account. |
Google API Secret Key | Global | The secret key that is associated with your Google reCAPTCHA account. |
Minimum Score Threshold | Global | The minimum score that identifies a user interaction as a potential risk, where 1.0 is a typical user interaction, and 0.0 is likely a bot. Default: 0.5 |
Invisible Badge Position | Global | The position of the invisible reCAPTCHA badge on each page. Options: Inline / Bottom Right / Bottom Left |
Theme | Global | Determines the style of the Google reCAPTCHA box. Options: Light Theme (default) / Dark Theme |
Language Code | Global | A two-character code that specifies the language that is used for Google reCAPTCHA text and messaging. |
reCAPTCHA Failure Messages
Field | Scope | Description |
---|---|---|
reCAPTCHA Validation Failure Message | Global | The message that is displayed in the Admin if verification fails. Default text: reCAPTCHA verification failed. |
reCAPTCHA Technical Failure Message | Global | The message that is displayed in the Admin if reCAPTCHA fails to return a verification result. Default text: Something went wrong with reCAPTCHA. Please contact the store owner. |
Admin Panel
The reCAPTCHA type that you choose must match the type that is associated with the API key from your Google reCAPTCHA account.
When using reCAPTCHA version 3, a genuine user with low score cannot proceed. For version 2, a genuine user with a low score receives a challenge. Consider carefully if genuine users with a low score should have an opportunity to solve a challenge (version 2) or be blocked (version 3).
Field | Scope | Description |
---|---|---|
Enable for Login | Global | Determines the type of reCAPTCHA that is enabled for the Admin login. Options:No - (default) Does not validate the Admin login.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCAPTCHA v3 - (Recommended) Validates user behavior in the background based on interaction score. |
Enable for Forgot Password | Global | Determines the type of reCAPTCHA that is enabled to request an Admin password reset. Options:No - (default) Does not validate the password reset request.reCAPTCHA v2 ("I am not a robot") - Requires the user to select the I’m not a robot checkbox.Invisible reCAPTCHA v2 - Validates user behavior in the background without requiring interactions based on score.Invisible reCaptcha v3 - (Recommended) Validates user behavior in the background based on interaction score. |
recommendation-more-help
d39aca6f-58a0-41c6-83eb-39fd0ef30672